Kill Process

[StoneHeart]

How does Kernel Detective "smart terminate" process work?

 

I found it very interesting and awesome to kill any stubborn process.

 

Is there any source for it?

[kao]

Kernel Detective is not opensource, if you want to know, just reverse it yourself.

 

But if you want to learn about different ways to kill process, you can check:

http://www.matousec.com/projects/security-software-testing-suite/

http://www.matousec.com/projects/security-software-testing-suite-64/

Read the source, files kill*.c / kill*.cpp

[StoneHeart]

Kernel Detective is not opensource, if you want to know, just reverse it yourself.

 

But if you want to learn about different ways to kill process, you can check:

http://www.matousec.com/projects/security-software-testing-suite/

http://www.matousec.com/projects/security-software-testing-suite-64/

Read the source, files kill*.c / kill*.cpp

 

Thanks for the info

[GIV]

I use VB.

For a VB .NET example take a look here:

 

http://www.codeproject.com/Tips/509446/How-to-kill-any-process-using-VB-NET

[LCF-AT]

Hi,

so I have a question about killing a process.So sometimes it happend that the exe called a faultrep and creates a drwtsn32.exe process and in some cases I can kill this process again from the processlist but in some other cases I can't kill them so that I have for exsample 5 times the drwtsn32.exe process in the list.So what is the reason why I can't sometimes remove these processes also not with the IceSword tool or others so then I can just re-start the system only to get them removed.

greetz

[deepzero]

you can just disable Dr. Watson (== drwtsn32.exe)

 

http://support.microsoft.com/kb/188296

[LCF-AT]

Hi Deep and thanks for the info.

So I just need to delete the AeDebug key?Or is it also ok if I just set the Auto to 0 instead 1?

So I export the AeDebug key = Done

Now I delete this key = No using of Dr.Watson anymore right?

If I want to enable it again then I just execute the exportet Reg file right?So why then I need to enter drwtsn32 -i before?Not needed or?

greetz

[deepzero]

you can try that, but i it s best to follow the instructions exactly. And the instructions say to delete it.

 

I dont know what the -i thing is good for exactly. Just do it.

[DerW]

In my opinion one of the best posts on this: http://wj32.org/wp/2009/05/10/12-ways-to-terminate-a-process/

[ewwink]

open source: Process Hacker

http://processhacker.sourceforge.net/